No cookies. No trackers. No banner.

// version: June 2026 · controller: Orcro Limited

§P-1Who we are

Orcro Limited is the controller of personal data described in this notice. We are registered in England and Wales (company no. 11173406), registered office C/O Saffery, St John’s Court, Easton Street, High Wycombe, HP11 1JX. For anything in this notice, contact team@orcro.co.uk.

§P-2What this website collects

Almost nothing. The site is static: it sets no cookies, uses no analytics or advertising technology, and embeds no third-party content. Fonts, images and video are served from our own deployment.

Our hosting and content-delivery provider, Cloudflare, processes technical connection data — your IP address, browser user agent, and request logs — as is necessary to deliver the site to you and to protect it against attack and abuse. We rely on our legitimate interests (UK GDPR Article 6(1)(f)) in operating a secure, functioning website. This data is held in routine server logs and not used to identify or profile visitors.

§P-3When you contact us

If you email us, call us, or use a contact form on this site, we will hold the information you provide — typically your name, contact details, organisation, and the content of your message — in order to respond and to manage our relationship with you. We rely on our legitimate interests in responding to enquiries and, where you are considering engaging us, on taking steps at your request prior to entering a contract (Article 6(1)(b)).

If you become a client, the personal data we process in delivering an engagement is governed by our engagement terms in addition to this notice.

§P-4What we don’t do

We do not sell personal data. We do not use it for automated decision-making. We do not send marketing without a lawful basis to do so, and you may opt out of any marketing at any time by emailing team@orcro.co.uk.

§P-5Sharing and transfers

We share personal data only with service providers who support our business — hosting and content delivery, email and IT systems — under contracts that restrict their use of it, and with professional advisers where necessary. Where a provider processes data outside the UK, we ensure an appropriate safeguard applies: a UK adequacy decision, or the UK International Data Transfer Agreement or Addendum.

§P-6Retention

We keep personal data only as long as needed for the purpose it was collected: routine server logs for short, rolling periods; enquiry correspondence for as long as the enquiry remains live and a reasonable period after; client engagement records for the periods our professional and legal obligations require.

§P-7Your rights

You have the rights provided by UK data protection law, including to access your personal data, to have it rectified or erased, to restrict or object to its processing, and to data portability. To exercise any of them, email team@orcro.co.uk.

If you are unhappy with how we have handled your personal data, please complain to us first — we take complaints seriously and will acknowledge and respond to them promptly, in line with the complaints framework introduced by the Data (Use and Access) Act 2025. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.

§P-8Changes

If we change how this website works in a way that affects your privacy — for example, by adding a contact form or any new tooling — we will update this notice and its version date.